Hi Leutz,
als ich grade das Protokoll überprüfte, fand ich folgende "Kuriosität" vor:
Typ Datum / Zeit Benutzer Aktion oder Ereignis
2007/05/21 14:25:53 admin Add host IP [200.30.76.210] to blocking list by [system].
2007/05/21 14:25:53 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:47 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:44 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:40 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:38 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:37 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:35 admin Add host IP [200.30.76.210] to blocking list by [system].
2007/05/21 14:25:35 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:32 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:32 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:30 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:25:24 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
2007/05/21 14:24:57 Administrator FTP client [Administrator] from [200.30.76.210] failed to log in the server.
Wie kann es denn sein, dass eine IP geblockt wird, der Angreifer dennoch weiterhin die Möglichkeit hat anzugreifen, bis er dann schließlich ein zweites Mal geblockt wird????
